CVE-2013-5757

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the…

published August 3, 2014

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiServer.exx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02754 · 86.1th percentile
Published
2014-08-03T18:00Z
EPSS history
Timeline
  • 03 AUG 18:00Z
    Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the…
    cvelistv5